self-learning

SUSPICIOUS. The skill’s purpose broadly matches its capabilities, but its core design is risky: it converts untrusted web content into persistent agent instructions and saves them as installable skills. That creates a high prompt-injection and transitive-trust risk even without obvious credential theft or malicious exfiltration.